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Abstract 

Levesque introduced the notion of only-knowing to precisely capture the beliefs of a knowledge 
base. He also showed how only-knowing can be used to formalize non-monotonic behavior within 
a monotonic logic. Despite its appeal, all attempts to extend only-knowing to the many agent case 
have undesirable properties. A belief model by Halpern and Lakemeyer, for instance, appeals to 
proof-theoretic constructs in the semantics and needs to axiomatize validity as part of the logic. 
It is also not clear how to generalize their ideas to a first-order case. In this paper, we propose a 
new account of multi-agent only-knowing which, for the first time, has a natural possible-world 
semantics for a quantified language with equality. We then provide, for the propositional fragment, 
a sound and complete axiomatization that faithfully lifts Levesque's proof theory to the many agent 
case. We also discuss comparisons to the earlier approach by Halpern and Lakemeyer. 



1 Introduction 



Levesque's notion of only-knowing is a single agent monotonic logic that was proposed with the in- 
tention of capturing certain types of nonmonotonic reasoning. Levesque ([1990]) already showed 
that there is a close connection to Moore's ([1985 ]) autoepistemic logic (AEL). Recently, Lakemeyer 
and Levesque ([2005]) showed that only -knowing can be adapted to capture default logic as well. 
The main benefit of using Levesque's logic is that, via simple semantic arguments, nonmonotonic 
conclusions can be reached without the use of meta-logical notions such as fixpoints [Rosati 2000; 



Levesque & Lakemeyer 2001 1 . Only-knowing is then naturally of interest in a many agent context, 
since agents capable of non-trivial nonmonotonic behavior should believe other agents to also be equipped 
with nonmonotonic mechanisms. For instance, if all that Bob knows is that Tweety is a bird and a default 
that birds typically fly, then Alice, if she knows all that Bob knows, concludes that Bob believes Tweety 
can flyQ Also, the idea of only-knowing a collection of sentences is useful for modeling the beliefs of a 
knowledge base (KB), since sentences that are not logically entailed by the KB are taken to be precisely 
those not believed. If many agents are involved, and suppose Alice has some beliefs on Bob's KB, then 
she could capitalize on Bob's knowledge to collaborate on tasks, or plan a strategy against him. 

As a logic, Levesque's construction is unique in the sense that in addition to a classical epistemic 
operator for belief, he introduces a modality to denote what is at most known. This new modality 
has a subtle relationship to the belief operator that makes extensions to a many agent case non-trivial. 
Most extensions so far make use of arbitrary Kripke structures, that already unwittingly discard the 
simplicity of Levesque's semantics. They also have some undesirable properties, perhaps invoking 
some caution in their usage. For instance, in a canonical model (Lakemeyer 1993), certain types of 
epistemic states cannot be constructed. In another Kripke approach (Halpern 1993), the modalities do 
not seem to interact in an intuitive manner. Although an approach by Halpern and Lakemeyer ([2001]) 
does indeed successfully model multi-agent only-knowing, it forces us to have the semantic notion 
of validity directly in the language and has proof-theoretic constructs in the semantics via maximally 
consistent sets. Precisely for this reason, that proposal is not natural, and it is matched with a proof 
theory that has a set of new axioms to deal with these new notions. It is also not clear how one can 
extend their semantics to the first-order case. Lastly, an approach by Waaler ([2004]) avoids such an 



axiomatization of validity, but the model theory also has problems [Waaler & Solhaug 2005 1. Technical 
discussions on their semantics are deferred to later. 

The goal of this paper is to show that there is indeed a natural semantics for multi-agent only- 
knowing for the quantified language with equality. For the propositional subset, there is also a sound 
and complete axiomatization that faithfully generalizes Levesque's proof theoryo We also differ from 
Halpern and Lakemeyer in that we do not enrich the language any more than necessary (modal operators 
for each agent), and we do not make use of canonical Kripke models. And while canonical models, in 
general, are only workable semantically and can not be used in practice, our proposal has a computa- 
tional appeal to it. We also show that if we do enrich the language with a modal operator for validity, 



but only to establish a common language with [Halpern & Lakemeyer 2001 1, then we agree on the set of 



valid sentences. Finally, we obtain a first-order multi-agent generalization of AEL, defined solely using 
notions of classical logical entailment and theoremhood. 



'We use the terms "knowledge" and "belief interchangeably in the paper. 

2 The proof theory for a quantified language is well known to be incomplete for the single agent case. It is also known that 
any complete axiomatization cannot be recursive | Halpern & Lakemeyer 1995 , Levesque & Lakemeyer 2001 1. 
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The rest of the paper is organized as follows. We review Levesque's notions^ and define a se- 
mantics with so-called k-structures. We then compare the framework to earlier attempts. Following 
that, we introduce a sound and complete axiomatization for the propositional fragment. In the last sec- 
tions, we sketch the multi-agent (first-order) generalization of AEL, and prove that /c-structures and 
[Halpern & Lakemeyer 2001 1 agree on valid sentences, for an enriched language. Then, we conclude 
and end. 



2 The k -structures Approach 

The non-modal part of Levesque's logicr|CW'£ consists of standard first-order logic with = and a count- 
ably infinite set of standard names Nu To keep matters simple, function symbols are not considered in 
this language. We call a predicate other than =, applied to first-order variables or standard names, an 
atomic formula. We write a^ to mean that the variable x is substituted in a by a standard name. If all 
the variables in a formula a are substituted by standard names, then we call it a ground formula. Here, 
a world is simply a set of ground atoms, and the semantics is defined over the set of all possible worlds 
W. The standard names are thus rigid designators, and denote precisely the same entities in all worlds. 
ONC also has two modal operators: L and N. While La is to be read as "at least a is known", Na 
is to be read as "at most -<a is known". A set of possible worlds is referred to as the agent's epistemic 
state e. Defining a model to be the pair (e, w) for w € W, components of ONC's meaning of truth are: 



1. 


e, 


w 




p iff p € w and p is a ground atom, 


2. 


e, 


■w 


h 


(m = n) iff m and n are identical standard names 


3. 


e, 


■w 


h 


-■a iff e, w \J= a, 


4. 


e, 


w 


(= 


a V P iff e, w \= a or e, w \= (3, 


5. 


e, 


w 


(= 


Vx. a iff e, w \= a x n for all standard names n, 


6. 


e, 


w 


(= 


La iff for all w' G e, e, w' \= a, and 


7. 


e, 


■w 


h 


Na iff for all w' e, e, ?j/ |= a. 



The main idea is that a is (at least) believed iff it is true at all worlds considered possible, while (at 
most) a is believed to be false iff it is true at all worlds considered impossible. So, an agent is said to 
only-know a, syntactically expressed as La A N->a, when worlds in e are precisely those where a is 
true. Halpern and Lakemeyer ([2001]) underline three features of the semantical framework of ONC, 
the intuitions of which we desire to maintain in the many agent setting: 

1. Evaluating Na does not affect the epistemic possibilities. Formally, in ONC, after evaluating 
formulas of the form Na the agent's epistemic state is still given by e. 

3 There are other notions of "all I know", which will not be discussed here [Halpern & Moses 1985 , 
IBen-David & Gafni 19891 . Also see IRosati 20001 . 

4 We name the logic following | Halpern & Lakemeyer 2001 1 for ease of comparisons later on. It is referred to as OC in 
| Halpern & Lakemeyer 1995 , Levesque & Lakemeyer 2001 1. 

5 More precisely, we have logical connectives V, V and -i, Other connectives are taken for their usual syntactic abbrevia- 
tions. 
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2. A union of the agent's possibilities, that evaluate L, and the impossible worlds that evaluate N, 
is fixed and independent of e, and is the set of all conceivable states. Formally, in OMC, La is 
evaluated wit. worlds w G e, and iVa is evaluated wrt. worlds w £ W — e; the union of which is 
W. The intuition is that the exact complement of an agent's possibilities is used in evaluating N. 

3. Given any set of possibilities, there is always a model where precisely this set is the epistemic 
state. Formally, in OMC, any subset of W can be defined as the epistemic state. 

Although these notions seem clear enough in the single agent case, generalizing them to the many agent 



case is non-trivial [Halpern & Lakemeyer 2001 1. We shall return to analyze the features shortly. Let 
us begin by extending the language. Let OMC n be a first-order modal language that enriches the non- 
modal subset of OMC with modal operators Li and iYj for i = a, b. For ease of exposition, we only 
have two agents a (Alice) and b (Bob). Extensions to more agents is straightforward. We freely use Oi, 
such that OiCt is an abbreviation for Lia A N^a, and is read as "all that i knows is a". Objective and 
subjective formulas are understood as follows. 

Definition 2.1: The i-depth of a formula a, denoted \a\i, is defined inductively as (Dj denotes Li or 

1. \a\i = 1 for atoms, 

2. |-ia|j = \a\i, 

3. |Vx. a\i = \a\i, 

4. |aV/S|j = max(\a\i,\(3\i), 

5. \Oia\i = \a\i , 

6. |Dj-a|i = \a\j + 1, for j ^ i 

A formula has a depth k if max(a-depfh,6-depfh) = k. A formula is called i-objective if all epistemic 
operators which do not occur within the scope of another epistemic operator are of the form dj for 
i 7^ j. A formula is called i-subjective if every atom is in the scope of an epistemic operator and all 
epistemic operators which do not occur within the scope of another epistemic operator are of the form 



For example, a formula of the form L a L^L a p V L^q has a depth of 4, a a-depth of 3 and a 6-depth 
of 4. L(,q is both 6-subjective and a-objective. A formula is called objective if it does not mention any 
modal operators. A formula is called basic if it does not mention any Ni for i = a,b. We now define 
a notion of epistemic states using k-structures . The main intuition is that we keep separate the worlds 
Alice believes from the worlds she considers Bob to believe, to depth k. 

Definition 2.2: A fc-structure (k > 1), say e k , for an agent is defined inductively as: 

- e 1 C W x {{}}, 

— e k C W x E fc_1 , where E m is the set of all m-structures. 
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A e 1 for Alice, denoted as e\, is intended to represent a set of worlds {(w, {}}, . . .}. A e 2 is of the form 
{(w, el), {w' , e'l), . . .}, and it is to be read as "at w, she believes Bob considers worlds from el possible 
but at w', she believes Bob to consider worlds from e'l possible". This conveys the idea that Alice has 
only partial information about Bob, and so at different worlds, her beliefs about what Bob knows differ. 
We define a e k for Alice, a e- 7 for Bob and a world w G W as a (k, j)-model (e* ,e b ,w). Only sentences 
of a maximal a-depth of k, and a maximal o-depth of j are interpreted wrt. a (k, j)-model. The complete 
semantic definition is: 



1 . e k , e J b , w \= p iff p G w and p is a ground atom, 

2. e k , e^, w \= (m = n) iff m,n G N and are identical, 

3- e k , e£, u> |= -.a iff e*, e£, w tf= a, 

4. e*, e£, w \= a V /? iff e*, e£, w |= a or e*, e£, u> |= /?, 

5. e*, e£, to |= Vx. a iff e„, e^, w \= for all n <E Af, 

6. e*, eg, to |= L a a iff for all (w', e^ 1 ) G e*. 
e*,e£-\u/ \=a, 

1. e k a ,e> b ,w\= N a a iff for all («/, e^ 1 ) £ e*. 
e*,ej _1 ,«/ |=a 



And since O a a syntactically denotes Z a a A N a ^a, it follows from the semantics that 

8. e k , e{,w \= O a a iff for all worlds w', for all e fc_1 for Bob, (w r , e^ 1 } G iff e£, e^ _1 , u/ |= a 

(The semantics for L^a and iV^a are given analogously.) A formula a (of a-depth of k and of 6-depth 
of j) is satisfiable iff there is a (fc, j)-model such that e k , e J b ,w \= a. The formula is valid (|= a) iff 
a is true at all (A;, j) -models. Satisfiability is extended to a set of formulas £ (of maximal a, o-depth 
of k,j) in the manner that there is a (k, j)-model e k , e J b ,w such that e k , e J b , w \= a' for every a' G S. 
We write S |= a to mean that for every (fc, j) -model e k ,e b ,w,ife k ,e b ,w \= a' for all a' G S, then 
e k a ,e{,w |= a. 

Validity is not affected if models of a depth greater than that needed are used. This is to say, if a 
is true wrt. all (k,j) -models, then a is true wrt. all (A/, j')-models for k' > k,f > j. We obtain this 
result by constructing for every e k , a ^-structure e a |^ , such that they agree on all formulas of maximal 
a-depth k. Analogously for e\ . 



Definition 2.3: Given eff, we define e a i\! for k' > k > 1: 

2. e a |f = {{w,{}) | (u;,e{f _1 ) G e*'}, 

3. eXH^^-i 1 )!^^" 1 )^"}' 



4 



Lemma 2.4: For all formulas a of maximal a, b-depth of k,j, e*', e J b , w (= a iff e a \!l , e^j , w (= a, 
/or k' >k,j' > j. 

Proof: By induction on the depth of formulas. The proof immediately holds for atomic formulas, 
disjunctions and negations since we have the same world w. Assume that the result holds for formulas 
of a, 6-depth 1. Let a such a formula, and suppose e*' , e 3 h ,w \= L a a (where L a a has a, 6-depth of 1, 2). 
Then, for all (w', e^ 1 ) G e*f , e„', ejf _1 , u/ (= a iff (by induction hypothesis) e a \l( , e&4-i _1 , «/ |= a 
iff e a |2 il})^ H -ka Q - By construction, we also have e a \f{ ,{},w \= L a a. Lastly, since L a a is 
a-subjective, b's structure is irrelevant, and thus, e a \J[\ &b\r\ > w H -^a a - 

For the reverse direction, suppose e 4-*', e&44 > w H ^tt a Then for all u/ G e a |f, e 4-*', {}, w' \= 
a iff (by construction) for all (w',e% _1 ) € e„ , e^',e^ |= a iff e^',{},ii; |= L a a. Since b's 

structure is irrelevant, we have e^', , w (= L a «- The cases for L&a:, iV a a and TV^a are completely 
symmetric. | 



Theorem 2.5: For all formulas a of a, b-depth ofk, j, if a is true at all (k, j)-models, then a is true at 
all (k', j')-models with k' > k and j' > j. 

Proof: Suppose a is true at all (k, j)-models. Given any (k', j')-model, by assumption e a ]% , e&4-j , w \= 
a and by Lemma [2~4l e% , e| , w \= a. I 



Knowledge with /c-structures satisfy weak S5 properties, and the Barcan formula [Hughes & Cresswell 1972]. 



Lemma 2.6: If a is a formula, the following are valid wrt. models of appropriate depth (Oj denotes Li 
or Ni): 

1. HiO. AD f (a D /9) D 

2. D DiDia, 

4. Vcc. Dja D D^Vaj. a). 

Proof: The proofs are similar. For item 3, wlog let Dj be L a . Suppose e\, e J b ,w \= ->L a a. There is 
some (w', e^ 1 } G such that e^, e? -1 , u/ |= -nx Let w" be any world such that (w", e'^" 1 ) G e„. 
Then, e^, e'l~ l ,w" \= ->L a a. Thus, e„, e?, to |= L a ->L a a. The case of iV a is analogous. | 

Before moving on, let us briefly reflect on the fact that ^-structures have finite depth. So suppose a 
only-knows KB, of depth k. Using /c-structures allows us to reason about what is believed, up to depth 
k. Also, if we construct epistemic states from ^'-structures where k! > k, then the logic correctly cap- 
tures non-beliefs beyond the depth k. To illustrate, let true (depth 1) be all that a knows. Then, it can 
easily be shown that both the sentences O a {true) D -iL a -iLba and O a (true) D -<L a Lba are valid 
sentences in the logic, by considering any e 2 (and higher) for a. For most purposes, this restriction of 
having a parameter k seems harmless in the sense that agents usually have a finite knowledge base with 



5 



sentences of some maximal depth k and they should not be able to conclude anything about what is 
known at depths higher than k, with one exception. If we were to include a notion of common knowl- 
edge [Fagin, Halpern, Moses & Vardi 1995 1, then we would get entailments about what is believed at 
arbitrary depths. With our current model, this cannot be captured, but we are willing to pay that price 
because in return we get, for the first time, a very simple possible-world style account of only-knowing. 
Similarly, we have nothing to say about (infinite) knowledge bases with unbounded depth. 



3 Multi-Agent Only-Knowing 



In this section, we return to the features of only-knowing discussed earlier and verify that the new 
semantics reasonably extends them to the multi-agent case. We also briefly discuss earlier attempts at 
capturing these features. Halpern ([1993 ]), Lakemeyer ([1993 ]), and Halpern and Lakemeyer ( 11200111 ) 
independently attempted to extend OAfC to the many agent casein There are some subtle differences 
in their approaches, but the main restriction is they only allow a propositional language. Henceforth, 
to make the comparison feasible, we shall also speak of the propositional subset of OMC n with the 
understanding that the semantical framework is now defined for propositions (from an infinite set <£) 
rather than ground atoms. 

The main component in these features is the notion of possibility. In the single agent case, each 
world represents a possibility. Thus, from a logical viewpoint, a possibility is simply the set of objective 
formulas true at some world. Further, the set of epistemic possibilities is given by {{objective formulas true at w} 
w € e}. Halpern and Lakemeyer ([2001 ]) correctly argue that the appropriate generalization of the no- 
tion of possibility in the many agent case are i-objective formulas. Intuitively, a possible state of affairs 
according to a include the state of the world (objective formulas), as well as what b is taken to believe. 
The earlier attempts by Halpern and Lakemeyer use Kripke structures with accessibility relations /Q for 
each agent i. Given a Kripke structure M, the notion of possibility is defined as the set of i-objective for- 
mulas true at some Kripke world, and the set of epistemic possibilities is obtained from the i-objective 
formulas true at all i-accessible worlds. Formally, the set of epistemic possibilities true at (M, w), where 
w is a world in M, is defined as {objf(M, w') \ w' € K.i(w)}, where objf(M, w') is a set consisting 
of i-objective formulas true at (M, w')u Although intuitive, note that, even for the propositional sub- 
set of ONC, a Kripke world is a completely different entity from what Levesque supposes. Perhaps, 
one consequence is that the semantic proofs in earlier approaches are very involved. In contrast, we 
define worlds exactly as Levesque supposes. And, our notion of possibility is obtained from the set of 
a-objective formulas true at each (w, e^ 1 ) in e k . 



Definition 3.1: Suppose M = (e*, e J b ,w) is a (k, j)-model. 

1. let objf(M) = {i-objective <p \ M \= 4>}, 

2. let Objt(e k a ) = {obji({},e k b -\w) | (w^^ 1 ) € e k a }, 

3. let Obj+ (el) = {obj+(el-\{},w) | (w,^ 1 ) G e J J. 
6 For space reasons, we do not review all aspects of these approaches. 

7 The superscript + denotes that the set includes non-basic formulas. Given X + , we let X — {<f> is basic | <f> £ X + }. 
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All the o-objective formulas true at a model M, essentially the objective formulas true wrt. w and the 
6-subjective formulas true wrt. el, are given by obj^(M). Note that these formulas do not strictly 
correspond to a's possibilities. Rather, we define Obj^ on her epistemic state e*, and this gives us 
all the a-objectives formulas that a considers possible. We shall now argue that the intuition of all of 
Levesque's properties is maintainedj§ 

Property 1. In the single agent case, this property ensured that an agent's epistemic possibilities are 
not affected on evaluating N. This is immediately the case here. Given a model, say (ele J b ,w), 
a's epistemic possibilities are determined by Obj^{e k ). To evaluate N a a, we consider all models 
( e a> e fe _1 ' w> ) sucn tnat i w ' '> e 6 -1 ) e a- Again, a's possibilities are given by Obj^(e^) for all these 
models, and does not change. 

Property 2. In the single agent case, this property ensured that evaluating La and Na is always 
wrt. the set of all possibilities, and completely independent of e. As discussed, in the many agent 
case, possibilities mean i-objective formulas and analogously, if a is a possibility in a's view, say 
an a-objective formula of maximal 6-depth of k, then we should interpret L a a and N a a wrt. all a- 
objective possibilities of max. depth k: the set of (k + restructures. Clearly then, the result is fixed and 
independent of the corresponding e k+1 . The following lemma is a direct consequence of the definition 
of the semantics. 

Lemma 3.2: Let a be a i-objective formula of j -depth k, for j ^ i. Then, the set ofk + 1-structures 
that evaluate L^a and N^a is E fc+1 . 

Property 3. The third property ensures that one can characterize epistemic states from any set of i- 
objective formulas. Intuitively, given such a set, we must have a model where precisely this set is the 
epistemic state. Earlier attempts at clarifying this property involved constructing a set of maximally 
K45 n -consistent sets of basic i-objective formulas, and showing that there exist an epistemic state that 
precisely corresponds to this set. But, defining possibilities via K45 n proof-theoretic machinery in- 
evitably leads to some limitations, as we shall see. We instead proceed semantically, and go beyond 
basic formulas. Let Q be a satisfiable set of i-objective formulas, say of maximal j-depth k, for j ^ i. 
Let O' be a set obtained by adding a i-objective formula 7 of maximal j-depth k such that Q,' is also 
satisfiable. By considering all i-objective formulas of maximal j-depth k, let us construct Q,', Q", ... by 
adding formulas iff the resultant set remains satisfiable. When we are done, the resulting $7* is what we 
shall call a maximally satisfiable i-objective setj^l Naturally, there may be many such sets corresponding 
to J7. We show that given a set of maximally satisfiable i-objective sets, there is a model where precisely 
this set characterizes the epistemic state. 

Theorem 3.3: Let S{ be a set of maximally satisfiable sets of i-objective formulas, and a a satisfiable 
objective formula. Suppose S a is of max. b-depth k — 1 and Sb is of max. a-depth j — 1. Then there is a 
model M* = (e* k a , e*{,w*) such that M* \= a, S a = Obj+{e* k a ) and S b = Obj+{e*l). 

8 It is interesting to note that such a formulation of Levesque's properties is not straightforward in the first-order case. That 
is, for the quantified language, it is known that there are epistemic states that can not be characterized using only objective 
formulas [Levesque & Lakemeyer 2001"). Thus, it is left open how one must correctly generalize the features of first-order 
OAfC. 

9 A maximally satisfiable set is to be understood as a semantically characterized complete description of a possibility, 
analogous to a proof theoretically characterized notion of maximally consistent set of formulas. 



7 



Proof: Consider S a . Each S' G S a is a maximally satisfiable a-objective set, and thus by defini- 
tion, there is a /c-structure (w' ,eT~ x ) such that {j^ -1 ,?// |= S'. Define such a set of ^-structures 
{(w' , e^ -1 }}, corresponding to each S' G S a , and let this be e* k . It is immediate to verify that 
Obja(e*a) = S a - Analogously, for e* 3 b using Sf,. Finally, there is clearly some world w* where a 
holds. | 



3.1 On Validity 

How does the semantics compare to earlier approaches? In particular, we are interested in valid for- 
mulas. Lakemeyer ([1993 ]) proposes a semantics using K45 n -canonical models, but he shows that the 
formula -iO a -<ObP for any proposition p is valid. Intuitively, it says that all that Alice knows is that 
Bob does not only know p, and as Lakemeyer argues, the validity of -<O a ^ObP is unintuitive. After all, 
Bob could honestly tell Alice that he does not only know p. The negation of this formula, on the other 
hand, is satisfiable in a Kripke structure approach by Halpern ( 1119931 ), called the i-set approach^ It 
is also satisfiable in the fc-structure semantics. Interestingly, the i-set approach and fc-structures agree 
on one more notion. The formula L a ±. D -iN a ->Ob-iO a p (0 lS valid in both, while -i£ is satisfiable 
wrt. Lakemeyer ([1993]). (It turns out that the validity of £ in our semantical framework is implicitly 
related to the satisfiability of Ob^O a p, so this property is not unreasonable.) 

However, we immediately remark that the i-set approach and ^-structures do not share too many 
similarities beyond those presented above. In fact, the i-set approach does not truly satisfy Levesque's 
second property. For instance, N a -*ObP A L a -^ObP (A) is satisfiable in Halpern ([1993 ]). Recall that, 
in this property, the union of models that evaluate Nia and Lia must lead to all conceivable states. So, 
the satisfiability of A leaves open the question as to why ObP is not considered since ->ObP is true at all 
conceivable states. We show that, in contrast, A is not satisfiable in the /c-structures approach. Lastly, 



[Halpern & Lakemeyer 2001 1 involves enriching the language, the intuitions of which are perhaps best 
explained after reviewing the proof theory, and so we defer discussions to laterf^l 

Theorem 3.4: The following are properties of the semantics: 

1. O a ^ObP, for any p G <&, is satisfiable. 

2. h L a ± D ^N a ^O b ^O a p. 

3. N a ^ObP A L a ^ObP is not satisfiable. 

Proof: Item 1. Let W p = {w \ w (= p} and let E be all subsets of W except the set W p . It is easy to 
see that if el G E, then {}, e\ , w \/= ObP, for any world w. Now, define a e 2 for a that has all of W x E. 
Thus, e 2 , {}, w \= O a ^Obp. 

Item 2. Suppose e*, {}, w \= L a ± for any w G W. Then, for all (w' , e^ _1 ) G e*. e£, e£ _1 , w' \= _L, 
and thus, e k a = {}. Suppose now e k , {},w \= N a ^Ob^O a p. Then, wrt. all of (w', e^ _1 ) G" e k a i.e. all of 
E fc , -iOb^O a p must hold. That is, ^Ob^O a p must be valid. From above, we know this is not the case. 



°In his original formulation, Halpern ([ 1993 1) constructs trees. We build on discussions in [Halpern & Lakemeyer 2001 1 . 
'An approach by | Waaler 2004, Waaler & Solhaug 2005 1 is also motivated by the proof theory. Discussions are deferred. 
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Item 3. Suppose e^,{},w \= L a ^ObP, for any w. Then, for all (w',e* 1 ) G e*, e^e* |= 
-lOfep. Since 0;,p is satisfiable, there is a e*^ 1 such that {},e*£ -1 ,u;* (= O fc p, and (to*, e*£ _1 ) e* 
Then, e*,{},«> \=^N a -^0&.M 

Thus, fc-structures seem to satisfy our intuitions on the behavior of only-knowing. To understand why, 
notice that -<O a -iObP and A involve the nesting of N operators. Lakemeyer ( H1993II ) makes an un- 
avoidable technical commitment. A (i-objective) possibility is formally a maximally K45 n -consistent 
set of basic i-objective formulas. The restriction to basic formulas is an artifact of a semantics based on 
the canonical model. Unfortunately, there is more to agent i's possibility than just basic formulas. In the 
case of Halpern ([ 1993 ]), the problem seems to be that Ni and Li do not interact naturally, and that the 
full complement of epistemic possibilities is not considered in interpreting N. In contrast, Theorem 13 .3 1 
shows that we allow non-basic formulas and by using a strictly semantic notion, we avoid problems that 
arise from the proof-theoretic restrictions. And, since the semantics faithfully complies with the second 
property, A is not satisfiable. 

The natural question is if there are axioms that characterize the semantics. We begin, in the next 
section, with a proof theory by Lakemeyer ( 1119931 ) that is known to be sound and complete for all 
attempts so far, but for a restricted language. 



4 Proof Theory 

In the single agent case, CW£'s proof theory consists of axioms of propositional logic, axioms that 
treat L and N as a classical belief operator in K45, an axiom that allows us to use N and L freely 
on subjective formulas, modus ponens (MP) and necessitation (NEC) for both L and N as inference 
rules, and the following axiom) 12 l 

A5. Na D -iLa if ->a is a propositionally consistent 
objective formula. 

As we shall see, only the axiom A5 is controversial, since extending any objective a to any z-objective a 
is problematic. Mainly, the soundness of the axiom in the single agent case relies on propositional logic. 
But in the multi-agent case, since we go beyond propositional formulas establishing this consistency 
is non-trivial, and even circular. To this end, Lakemeyer ([ 1993 ]) proposes to resolve this consistency 
by relying on the existing logic K45 n . As a consequence, his proof theoretic formulation appropriately 
generalizes all of Levesque's axioms, except for A5 where its application is restricted to only basic 
i-objective consistent formulas. We use h to denote provability. 

Definition 4.1: ONC~ consists of all formulas a in OMC n such that no Nj may occur in the scope 
of a Li or a Ni, for i ^ j. 

The following axioms, along with MP and NEC (for Li and Ni) is an axiomatization that we refer to 
as AX n . AX n is sound and complete for the canonical model and the i-set approach for formulas in 
OMC-. 

''Strictly speaking, this is not the proof theory introduced in jLevesque 1990J, where an axiom replaces the inference rule 
NEC. Here, we consider an equivalent formulation by Halpern and Lakemeyer ([2001 1). 
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Al n . All instances of prepositional logic, 

A2 n . Li(a D p) D {L t a D Li/3), 

A3 n . N t (a D p) D (AT,a D iV 4 /3), 

A4 n . <7 D Li<r A ATjcr for i-subjective a, 

A5 n . ATja D -i-tja if ->a is a K45 n -consistent 
i-objective basic formula. 

Observe that, as discussed, the soundness of A5 n is built on K45 n -consistency. Since our semantics is 
not based on Kripke structures, proving that every K45 n -consistent formula is satisfiable in some (k, j)- 
model is not immediate. We propose a construction called the (k, ^-correspondence model. In the 
following, in order to disambiguate W from Kripke worlds, we shall refer to our worlds as prepositional 
valuations. 

Definition 4.2: The K45 n canonical model M c = (W c , vr c , K%, /Cg) is defined as follows: 

1. W c = {w | w is a (basic) maximally consistent set } 

2. for all p G and worlds w, 7r c (w)(p) = true iff p G w 

3. (to, w') G /C? iff C «/, = {a | L^a € w} 

Definition 4.3: Given M c , define a set of prepositional valuations W such that for each world w G W c , 
there is a valuation [u;]] G W, \w\ = {p \ p G ui}. 

Definition 4.4: Given Af c and a world w G W c , construct a (&,j)-model (ej ro j ,e| TO j^,[u;]) from 
valuations W inductively: 

1- e M l = {(lw%{}) \w'eKl(w)}, 

2 - e Ma = {(K],e M 6 _1 ) I G 

where e M J-i = {(K'],e K1 ^ 2 ) | w" G /Cg(w')}. 

Further, e| w | J b is constructed analogously. Let us refer to this model as the (k, j) -correspondence model 

of (M c ,w). 

Roughly, Defn. l4~4l is a construction of a (A;,j)-model that appeals to the accessibility relations in the 
canonical modelO Thus, a e l a for Alice wrt. w has precisely the valuations of Kripke worlds w' G 
K, c a {w). Quite analogously, a is a set {([pu/]], e k ~ 1 }}, where w' G fC c a {w) as before, but e k ~ l is an 
epistemic state for Bob and hence refers all worlds w" G IC b (w'). By a induction on the depth of a 
basic formula a, we obtain a theorem that a of maximal a, 6-depth k,j is satisfiable at (M c , w) iff the 
(A:, j) -correspondence model satisfies the formula. 

13 The construction is somewhat similar to the notion of generated submodels of Kripke frames | Hughes & Cresswel l 1984) . 
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Theorem 4.5: For all basic formulas a in OJ\f£ n and of maximal a, b-depth ofk, j, 
M c , w\=a iffe M k a , e M £, fwj \= a. 

Proof: By definition, the proof holds for propositional formulas, disjunctions and negations. So let us 
say the result holds for formulas of a, 6-depth 1. Suppose now M c , w \= L a a, where L a a has a, 6-depth 
of 1,2. Then for all w' G K^{w), M c ,w' \= a iff (by induction hypothesis) e^ w q ,e^ w rjz, [u/J (= a 
iff ej^j 2 , {}, |= L a a. By construction, we also have e^]*, {}, \w} \= L a a. Since b's structure is 
irrelevant, we get e^ji, e^j 2 , fwj \= L a a proving the hypothesis. 

For the other direction, suppose e M ^e H 2 , M |= L a a. For all {w'j G e M *, ej^j^, {}, {w'j \= a 
iff (by hyp.) M c , w' \= a for all w' G IC c a (w) iff M c , w \= L a aM 

Lemma 4.6: Every K45 n -consistent basic formula a is satisfiable wrt. some (k, j) -model. 

Proof: It is a property of the canonical model that every K45„-consistent basic formula is satisfiable 
wrt. the canonical model. Supposing that the formula has a a, 6-depth of k, j then from Thm 14.51 we 
know there is at least the correspondence (k, j) -model that also satisfies the formula. | 

Theorem 4.7: 

For all a G ONC~, if ' AX n h a then \= a. 

Proof: The soundness is easily shown to hold for Al n — A4 n . The soundness of A5 n is shown by 
induction on the depth. Suppose a is a propositional formula, and say -<a is a consistent propositional 
formula (and hence K45 n -consistent). Then there is a world w* such that {}, {},w* (= -ia. Given a 
e\, if {w*,e^~ l ) G e k a for some e^ _1 , then e k a , {}, w (= ~^L a a for any world w. If not, then e k , {}, w (= 
-<N a a. Thus, e k , {}, w (= N a a D ->L a a. Wlog, assume the proof holds for a-objective formulas of 
max. 6-depth k — 1. Suppose now, a is such a formula, and ->a is K45 n -consistent. By Lemma l4~6l there 
is (u;*,e*^ _1 ), such that {}, e** -1 , w* (= -i<x Again, if (w*,e* k ~ l ) G e*, then e£, |= ^-L a " and 
if not, then {}, u; |= ~^N a a. I 

We proceed with the completeness over the following definition, and lemmas. 

Definition 4.8: A formula tp is said to be independent of the formula <f> wrt. an axiom system AX, if 
neither AX \- (p D ip nor AX h D -i^>. 

Lemma 4.9: [Halpern and Lakemeyer, 2001 ] If (pi, ... , m are K45 n -consistent basic i-objective for- 
mulas then there exists a basic i-objective formula if) of the form Ljip' (j ^ i) that is independent of 
<j>x,. ■ ■ ,(f> m wrt. K45 n . 

Lemma 4.10: In the lemma above, if (pi are i-objective and of maximal j -depth kfor j ^ i, then there 
is a tp of j -depth 2k + 2. 

Lemma 4.11: [Halpern and Lakemeyer, 2001 ] If (j) and ip are i-objective basic formulas, and if A 
Niifi is AX n -consistent, then (p\J ip is valid. 
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Lemma 4.12: [Halpern and Lakemeyer, 2001 ] Every formula a G ONC n is provably equivalent to one 
in the normal form {written below for n = {a, 6}): 

V(cr A L a (p a Q A ^L a <pal • • • A ^L a <p a m 1 A L b ip b0 ... A -^L b (p bm2 A N a ip a0 ... A -<N a ip ani A N b ip b0 ... A 
-^N b ip bn2 ) 

where a is a propositional formula, and (fi m and ipi n are i-objective. Ifa£ OJ\f£~, <pi m and ipi n are 
basic. 

Theorem 4.13: For all formulas a G OMC~, if\=a then AX n h a. 

Proof: It is sufficient to prove that every ^LY n -consistent formula £ is satisfiable wrt. some (k,j)- 
model. If £ is basic, then by Lemma l4~6l the statement holds. If £ is not basic, then wlog, it can be 
considered in the normal form: 

V(cr A L a if aQ A ->L a (p al ... A ^L a p ami A • • • A ^L^^ A iV^aO • • • A -^N a ip ani A iV 6 V&o • • • A 

where er is a propositional formula, and tpi m and tpi n are i-objective and basic. Since a is propositional 
and consistent, there is clearly a world w* such that |= a. We construct a ^'-structure such that it 
satisfies all the a-subjective formulas in the normal form above. Following that, a /-structure for all the 
6-subjective formulas is constructed identically. The resulting (k', f) -model (with w*) satisfies £. 

Let A be all K45 n -consistent formulas of the form (p a o A -0aO A ->(p a j (for j > 1) or the form 
VaO A i)j a o A -^ipaj- Let 7 be independent of all formulas in A, as in Lemma |4~9l and l4~T0l Note that, 
while we take £ itself to be of maximal a, 6-depth of k,j, the depth of tp a o, . . . being a-objective are of 
maximal 6-depth k — 1, and hence 7 is of 6-depfh 2k (Lemma fc.lOl) . Given a consistent set of formulas, 
the standard Lindenbaum construction can be used to construct a maximally consistent set of formulas, 
all of a maximal 6-depth k — 1. That is, a formula is considered in the construction only if it has a 
maximal 6-depth k — 1. Now, let S a be a set of all maximally consistent sets of formulas, constructed by 
only considering formulas of maximal 6-depth k — 1, and containing ip a Q A (-iip a o V (VV) A 7)). Since 
each of these consistent sets are basic and a-objective, they are satisfiable by Lemma l4~6l Thus the sets 
S' G S a are satisfiable wrt. 2/c-structures (w, ef ). Let k' = 2k + 1. By constructing a ^'-structure for 
Alice, say e„ , from each (w, e\ k ) for every S' G 5 a , we have that Obj a (e k ) = S a . We shall show that 
all the a-subjective formulas in the normal form are satisfied wrt. (e k ,{},w*). 

Since for all S' G 5 a , we have ip a Q G 5' we get that e k , {}, |= L a Lp a Q. Now, since L a ip a Q A 
-<L a ip a j is consistent, it must be that A ->¥> a ,j i s consistent. For suppose not, then -i^oQ V ip a j is 
provable and thus, we have ip a Q D tp a j. We then prove L a (p a o D L a (p a j, and since we have L a ip a o we 
prove L a ip a j, clearly inconsistent with L a ip a o A -<L a <p a j. Now that c/? a o A -K/? a j is consistent, we either 
have that <p a o A -upoj A V'aO or c/? a o A ->(p a j A -^ao is consistent. With the former, we also have that 
VaO A -xfaj A V>aO A 7 is consistent. There are maximally consistent sets that contain one of them, both 
of which contain -i<p a j- This means that, e k , {}, w* \= ~^L a Lp a j. 

Now, consider some fc'-structure (w',e'l k ) g" e k . One of the following a-objective formulas must 
hold wrt. this ^'-structure: (a) ip a0 A ip a0 , (b) ip a0 A ^ip a o, (c) -upaa A VaO or (d) ->cp a0 A -.^ a0 . It can 
not be (d), since L a ip a Q A N a tp a Q is consistent, and this implies that ip a o V ip a o is valid (by Lemma 
14-1 lb - It certainly cannot be (b), for it would be in some S' G S a . This leaves us with options (c) and 
(a), both of which have -nfi a o. Since the /c'-structure was arbitrary, we must have for all (w, e^*) G" e k , 
{}, ef , w H ^ao- Thus, {}, W * |= N a ^ a0 . 
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Finally, since N a %[) a Q A ->N a i/} a j is consistent, it must be that ip a o A ^tp a j is consistent. Further, 
either V> a o A -nfraj A </? a or V'aO A -"^ a j A -■y'aO is consistent. If the former, then ^aO A ~<tpaj A </? a o A -17 
is also consistent. Let /3 be that which is consistent. Note that -i/3 A (ip a o A (-'ipaO V (V>aO A 7))) is 
consistent, and hence part of all S' G S a . This means that , {}, (= L a (-i/3). But since /3 itself is 
consistent, there is a fe'-structure such that {}, e* 6 2 k)^ w ' H ^- ^nd tn * s ^'-structure can not be in . 
This means that e^', {}, ui* (= ~^N a ip a j. Thus, all the a-subjective formulas in the normal form above 
are satisfiable wrt. e„ . I 

Now, observe that, although L a A. D -<N a ^Oi ) -'O a p (Q from Theorem l3.4l is valid, yet it is not deriv- 
able from AX n . In fact, the soundness result is easily extended to the full language OJ\fC n . Then, the 
proof theory cannot be complete for the full language since there is £ G OJ\fC n such that \f Q and |= C s . 
Similarly, the validity of non-provable formulas -iO a ->ObP and ( wrt. the canonical model and the i-set 
approach respectively, show that although AX n is also sound for the full language in these approaches, 
it cannot be compelete. Mainly, axiom A5 n has to somehow go beyond basic formulas. As Halpern and 
Lakemeyer ([2001 ]) discuss, the problem is one of circularity. We would like the axiom to hold for any 
a such that it is a consistent i-objective formula, but to deal with consistency we have to clarify what 
the axiom system looks like. 

The approach taken by Halpern and Lakemeyer is to introduce validity (and its dual satisfiability) 
directly into the language. Formulas in the new language, ONC^, are shown to be provably equivalent 
to ONC n . Some new axioms involving validity and satisfiability are added to the axiom system, and 
the resultant proof theory AX^ is shown to be sound and complete for formulas in ONC^, wrt. an 
extended canonical model. (An extended canonical model follows the spirit of the canonical model 
construction but by considering maximally AX\ -consistent sets, and treat Li and iVj as two indepen- 
dent modal operators.) So, one approach is to show that for formulas in the extended language the set 
of valid formulas overlap in the extended canonical model and /c-structures. But then, as we argued, 
axiomatizing validity is not natural. Also, the proof theory is difficult to use. And in the end, we would 
still understand the axioms to characterize a semantics bridged on proof-theoretic elements. 

Again, what is desired is a generalization of Levesque's axiom A5, and nothing more. To this end, 
we propose a new axiom system, that is subtly related to the structure of formulas as are parameters k 
and j. The axiom system has an additional t-axioms, and is to correspond to a sequence of languages 

Definition 4.14: Let OMC\ = OMC~. Let OMC^ 1 be all Boolean combinations of formulas of 
OMC l n and formulas of the form Lia and iV^a for a G ON C l n . 

It is not hard to see that ON '£* t +1 D ONC l n . Note that t here does not correspond to the depth of 
formulas. Indeed, a formula of the form (L^La) k+1 p is already in ONC~. Let AX l + l be an axiom 
system consisting of Al n — A4 n , MP, NEC and A5^ — A5^ +1 defined inductively as: 

A5^. Nid D -iL{a, if ->a is a K45 n -consistent 
i-objective basic formula. 

A5* t +1 . Nia D -iLi<x, if ->a G ONC l n , is i-objective, 
and consistent wrt. Al n — A4 n , A5^ — A5^ . 

14 The idea was also suggested by a reviewer in | Halpern & Lakemeyer 2001 1 for an axiomatic characterization of the ex- 
tended canonical model, although its completeness was left open. 
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Theorem 4.15: For all a G ONC^, if AX l n h a then \= a. 

Proof: We prove by induction on t. The case of AX\ is identical to Theorem l4.7l So, for the induction 
hypothesis, let us assume that wrt. AX l n , if AX l n h /3 for /3 G ONC l n then |= /3. Now, suppose that 
-•a is consistent wrt. AX l n and is a-objective. This implies that ^ a. Thus, there is some ^-structure 
(w*,e* b ) such that {},e* b ,w* \= -<a. Suppose now (w*,e* b ) G e^ +1 then e* +1 , {},«;' (= ->£ a and 
if not then e^ +1 , {},u>' (= -<N a a. Thus, e* +1 , (= -/V a a D -<L a a, demonstrating the soundness 

of AX f + l . | 

We establish completeness in a manner identical to Theorem 14.131 and thus it necessary to ensure that 
Lemma l4~9ll4.10l and l4.1 ll hold for non-basic formulas. 

Lemma 4.16: If (pi, . . . , 4> m are AX l n -consistent i-objective formulas, then there is a basic formula tp 
of the form Ljtp (j ^ i) that is independent of <pi, . . . , cj) m wrt. AX l n . 

Proof: Suppose that fa are a-objective and of maximal 6-depfh k. A formula tj) of the form (L b L a ) k+l p 
(where p G $ is in the scope of k + 1 L b L a ) is shown to be independent of fa, . . . , 4> m . Let us suppose 
we can derive a 7 of the form L b L a L b L a ... p of maximal depth k, to show that neither h 7 D ip nor 
h 7 D -1^. Given any formula, the only axioms in AX l n that can introduce 7 in the scope of modal 
operators is A4 n and A5^. Applying A4 ra gives L&7 or JVj/Y, and then using the axiom again we have 
L b L b ^ or L b N b ^f. It is easy to see that the resulting formulas are clearly independent from tp. Applying 
A5^ on the other hand, allows us to derive h 7 D iV a 7 or h 7 D -<L a ^f (7 is consistent wrf. ^4X^ and 
hence also wrt. A5^ _1 ). Again, we could show h 7 D -<L b -iL a j. Continuing this way, it might only 
be possible to derive -iL b -iL a . . . L b L a ... p of depth 2k + 2, that is indeed independent of ip. | 

Lemma 4.17: If (f) and 1/1 are i-objective formulas, 4>, ip G ONC l n and Li4> A is AX 1 ^ 1 -consistent 
then \= (j) V tjj. 

Proof: Suppose not. Then -xfr A -<ip is AX^-consistent, and by A5^ +1 we prove N a ((f> V ip) D 
->L a ((f> V if)), and thus, iV^ D ~<L a fa and this is not AX 1 ^ 1 -consistent with X a A N a ifj. | 

Theorem 4.18: For all a G if\=a then AX l n h a. 

Proof: Proof by induction on t. It is sufficient to show that if a formula f3 G ONC 1 ^ 1 is AX^ 1 - 
consistent then it is satisfiable wrt. some model. We already have the proof for ON C n (see Theorem 
14 . 1 3 b - Let us assume the proof holds for all formulas a G ONC l n . Particularly, this means that any 
formula that is ylX^-consistent is satisfiable wrt. some (A/,/)-model. Let a G ONC^ 1 (say of 
maximal a, 6-depth of k + 1, j + 1), and suppose that a is consistent wrt. AX 1 ^ 1 . It is sufficient to show 
that a is satisfiable. Wlog, we take it in the normal form: 

\f(o-AL a (p a0 A^L a p al . . . A ->L a (p ami A L b ip b0 . . . A -~L b ip bm2 A N a if) a0 . . . A -. N a ip ani A N b tp b0 ...A 

Note that, by definition, it must be that all of y>j m , are at most in ONC l n (i.e. they may also be in 
ONC 1 ^ 1 , ■ ■ •)> and i-objective. We proceed as we did for Theorem [4.1 3 1 but without restricting to basic 
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formulas. Let A be all AX l n -consistent formulas of the form ip a Q Aip a Q A -np a j or ip a o Aip a o A ->ip a j (they 
are of maximal 6-depfh k). Let 7 be independent of all formulas in A. Let S a be the set of all (AX* -) 
maximally consistent sets of formulas, constructed from formulas of maximal 6-depfh k, and containing 
VaO A ("'V'aO V (V'aO A 7)), and hence by induction hypothesis they are satisfiable in some model. Note 
that all formulas in S a are in ONC l n . The 6-depth is maximally 2k + 2. Letting k" = 2k + 2, we have 
that for all S" G there is a (w, ejjf ) such that {}, ejjf , w \= S'. Let k! = k" + 1. Letting be all 
such ^'-structures (u>, ) for each S' G 5 a makes Obj^(e^ ) = 5 a (in contrast, for Thereom l4.13l we 
dealt with Obj a ). We claim that this /c'-structure for Alice, a j'-structure for Bob constructed similarly, 
and a world where a holds (there is such a world since a is prepositional and consistent) is a model 
where a is satisfied. The proof proceeds as in Theorem 14. 131 We show the case of -<L a (p a j. 

Since L a ip a oA^L a tp a j is consistent wrt. AX 1 ^ 1 , it must be that (f a oA-<ipaj is consistent wrt. AX 1 ^ 1 . 
Further, since ip a o, ip a j G ON they must consistent be wrt. AX l n (for if not, they cannot by definition 
be consistent wrt. AX^ 1 ). This means that either ip a Q A -«p a j A i^ a Q or ip a Q A -<(p a j A -^ao is consistent. 
If the former is, then so is ip a Q A -^ a j A V'ao A 7. Since 5 a consist of all AX^-consistent formulas 
containing ip a o A (-<ipaO A (^ a o A 7)), there is clearly a S' G 5 a such that -^aj G S". Consequently, it 
can not be that e*', {}, |= L a ip a j. Thus, e*', {},«;' (= ^L a ip aj . | 

Thus, we have a sound and complete axiomatization for the prepositional fragment of ONC n . In 
comparison to Lakemeyer ( 11199310 . the axiomatization goes beyond a language that restricts the nesting 
of Ni. In contrast to Halpern and Lakemeyer ([2001]), the axiomatization does not necessitate the use of 
semantic notions in the proof theory. A third axiomatization by IWaaler ~2004t Waaler & Solhaug 2005] 



proposes an interesting alternative to deal with the circularity in a generalized A5. The idea is to 
first define consistency by formulating a fragment of the axiom system in the sequent calculus. Quite 
analogous to having t-axioms, they allow us to apply A5„ on z-objective formulas of a lower depth, 



thus avoiding circularity without the need to appeal to satisfiability as in [Halpern & Lakemeyer 2001]. 
Waaler and Solhaug ([2005]) also define a semantics for multi-agent only-knowing which does not 
appeal to canonical models. Instead, they define a class of Kripke structures which need to satisfy 
certain constraints. Unfortunately, these constraints are quite involved and, as the authors admit, the 
nature of these models "is complex and hard to penetrate." 



To get a feel of the axiomatization, let us consider a well studied example from | Halpern & Lakemeyer 2001 1 
to see where we differ. Suppose Alice assumes the following default: unless I know that Bob knows my 
secret then he does not know it. If the default is all that she knows, then she nonmonotonically comes 
to believe that Bob does not know her secret. Let 7 be a proposition that denotes Alice's secret, and 
we want to show that h O a {5) D L a ->L\/y, where 8 = -iL a Lf,j D ^L^. We write (Def.) to mean 
O a a = L a a A N a -<a, and we freely reason with prepositional logic (PL) or K45 n . 

1. O a {8) D L a ^L a L b j D La^Lb'j Def.,PL,A2 n 

2. O a (8) d N a ^L a L bl A N a L bl Def.,PL,K45 n 

3. N a L bl d ~^L a L hl A5* 

4. ~^L a L b j D L a ^L a L b j A4 n 

5. O a (8) D L a ^L a L bl 2,3,4,PL 

6. O a (8) D L a ^L bl 1.5.PL 
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We use A5„, and it is applicable because -iLbj is a-objective and K45„-consistent. Now, suppose 
Alice is cautious. She changes her default to assume that if she does not believe Bob to only-know some 
set of facts 9 G <£, then 9 is not all that he knows. We would like to show 

h O a (^L a O b 9 D -.Ojfl) D L a ^O b 9 

Of course, this default is different from 5 in containing O b 9 rather than L^. The proof is identical, 
except that we use A5^, since ^O b 9 G ON C} n is a-objective and -consistent. The latter proof 
requires reasoning with the satisfiability modal operator in Halpern and Lakemeyer ([2001]), and is not 
provable with the axioms of Lakemeyer ( 1119931 ). 



5 Autoepistemic Logic 

Having examined the properties of multi-agent only-knowing, in terms of a semantics for both the first- 
order and propositional case, and an axiomatization for the propositional case, in the current section 
we discuss how the semantics also captures autoepistemic logic (AEL). AEL, as originally developed 
by Moore ([ 1985 ]), intends to allow agents to draw conclusions, by making observations of their own 
epistemic states. For instance, Alice concludes that she has no brother because if she did have one then 
she would have known about it, and she does not know about it [Moore 1985 ]. The characterization 
of such beliefs are defined using fixpoints called stable expansions. In the single agent case, Levesque 
( 11199011 ) showed that the beliefs of an agent who only-knows a is precisely the stable expansion of a. 
Of course, the leverage with the former is that it is specified using regular entailments. In Lakemeyer 
( 11199311 ). and Halpern and Lakemeyer ([2001]), a many agent generalization of AEL is considered 
in the sense of a stable expansion for every agent, and relating this to what the agent only-knows. But 
their generalizations are only for the propositional fragment, while Levesque's definitions involved first- 
order entailments. In contrast, we obtain the corresponding quantificational multi-agent generalization 
of AEL. We state the main theorems below. The proofs are omitted since they follow very closely from 



the ideas for the single agent case | Levesque & Lakemeyer 2001 1. 



Definition 5.1: Let A be a set of formulas, and F is the z-stable expansion of A iff it the set of first-order 
implications of A U {Li/3 \ /3 G V} U {^Li/3 \ /3 T}. 

Definition 5.2: [Maximal structure] If is a fe-structure, let e+ be a ^-structure with the addition of all 

(w' , e^ _1 ) e k a such that for every a G OJ\fC~ of maximal a, 6-depth k, k — 1, if e\, {}, w (= L a a for 
any world w then e^, e^ _1 , w' \= a. Define T = {/3 [ /3 is basic and e+, {}, w \= L a (3} as the belief set 
ofe+ 

Theorem 5.3: Let M = (e^ ,el,w) be a model, where is a maximal structure for a. Let V be the 
belief set ofe+, and suppose a G ON£~ is of maximal a, b-depth k, k — 1. Then, M \= O a a iffT is 
the a-stable expansion of a. 



Theorem 15.31 essentially says that the complete set of basic beliefs at a maximal epistemic state where a 
is all that i knows, precisely coincides with the i-stable expansion of a. 
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6 Axiomatizing Validity 



Extending the work in [Lakemeyer 1993 ] and [Halpern 1993], which was only restricted to formulas in 
ONC~, Halpern and Lakemeyer ([2001]) proposed a multi-agent only -knowing logic that handles the 
nesting of Ni operators. But as discussed, there are two undesirable features. The first is a semantics 
based on canonical models, and the second is a proof theory that axiomatizes validity. Although such a 
construction is far from natural, we show in this section that they do indeed capture the desired properties 
of only-knowing. This also instructs us that our axiomatization avoids such problems in a reasonable 
manner. 

Recall that the language of [Halpern & Lakemeyer 2001 1 is ONC„, which is ONC n and a modal 
operator for validity, Val. A modal operator Sat, for satisfiability, is used freely such that Val(a) is 
syntactically equivalent to -iSat(-ia). To enable comparisons, we present a variant of our logic, that 
has all its main features, but has additional notions to handle the extended language. We then show that 
this logic and [Halpern & Lakemeyer 2001] agree on the set of valid sentences from ON (and also 
ONCn). 

The main feature of [ Halpern & Lakemeyer 2001] is the proof theory AX' n , and a semantics that is 
sound and complete for AX' n via the extended canonical model. AX' n consists of Al n — A4 n , MP, 
NEC and the following: 



A5' n . Sat(-ia) D (Nia D -iL a a), if a is i-objective. 

VI. Val(a) A Val(a D /3) D Val(f3). 

V2. Sat(pi A . . . p n ), if p^s are literals and p\ A . . .p n is 
propositionally consistent. 

V3. Sat(a A ft) A . . . Sat(a A ft) A Sat(j A 5i) ... A 

Sat{i A 5 m ) A Val(a V 7) D Sat(Lia A -^-ft ... A 
ATj7 A -iJVj-i^i . . .), if a, ft, 7, <5j are z-objective. 

V4. Saf(a) A &#(/?) D 5a?(a A /3), if a is i-objective 
and /3 is i-subjective. 

NECy a ;. From a infer VaZ(a). 



The essence of our new logic, in terms of a notion of depth (with [VaZ(a)|j = \a\i) and a semantical 
account over possible worlds, is as before. The complete semantic definition for formulas in ON of 
maximal a, 6-depth of k, j is: 



1. -8. as before, 

9. e*, e? h , w \= Val(a) if e„, e^, w \= a for all e^, e^, u;. 



Satisfiability and validity (|=) are understood analogously!^] Let ONC+ , . . . ONC+ be also defined 
analogously. Further, let axioms Al„ — A5^ be defined for ONC^ 1 . For instance, A5^ is defined for 

15 Note that Val corresponds precisely to how validity is defined. 
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any z-objective ->a G ON 1 that is consistent with Al n — A5^ _1 . Then, the semantics above is 
characterized by the proof theory AX^f defined (inductively) for OMC^f, consisting of AX l n (Al n — 
A5^, MP, NEC) with NECy a ; as an additional inference rule. 

Lemma 6.1: For all a G OAfCf, AXf \~aiff\=a. 

The proof of this lemma, and those of the following theorems are given in the appendix. We proceed to 
show that Sat(a) is provable from AX' n iff a is AX+*-consistent. 

Theorem 6.2: For all a G OAf£+ , AX' n h Sat(a) iff a is AX^ -consistent. 

This allows us to show that AX' n and AX^ agree on provable sentences. 

Theorem 6.3: For all a G OMCf, AX' n h a iff AX f h 



a. 



Lemma 6.4: For all a G OAf£+ , \= a iff a is valid in 
[Halpern & Lakemeyer 2001 /. 



Proof: AX' n is sound and complete for [Halpern & Lakemeyer 2001 J , and AX+ 1 is sound and com- 
plete for |=. | 



Since it can be shown that every a G OMC^ is provably equivalent to some a' G OMC n [Halpern & Lakemeyer 200 1| , 
we also obtain the following corollary. 



Corollary 6.5: For all a G ON 'C n , (= a iff a is valid in /[Halpern & Lakemeyer 2001]. 

7 Conclusions 

This paper has the following new results. We have a first-order modal logic for multi-agent only- 
knowing that we show, for the first time, generalizes Levesque's semantics. Unlike all attempts so far, we 



neither make use of proof-theoretic notions of maximal consistency nor Kripke structures | Waaler & Solhaug 2005 1. 
The benefit is that the semantic proofs are straightforward, and we understand possible worlds precisely 
as Levesque meant. We then analyzed a propositional subset, and showed first that the axiom system 
from Lakemeyer (1 199311 ) is sound and complete for a restricted language. We used this result to devise a 
new proof theory that does not require us axiomatize any semantic notions [Hafpe rn~& Lakemeyer 200 lj . 



Our axiomatization was shown to be sound and complete for the semantics, and its use is straightfor- 
ward on formulas involving the nesting of at most operators. In the process, we revisited the features 
of only-knowing and compared the semantical framework to other approaches. Its behavior seems to 
coincide with our intuitions, and it also captures a multi-agent generalization of Moore's AEL. Finally, 
although the axiomatization of Halpern and Lakemeyer ([2001]) is not natural, we showed that they 
essentially capture the desired properties of multi-agent only-knowing, but at much expense. 
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9 Appendix 

LemmaHZD For all a G OAfCf, Axf \-aiff\=a. 

Proof: The proof is via induction. Using Theorems 14.151 and 14. 1 8 1 as the base cases in the induction, 
there is one additional step on the structure of formulas. 

Soundness: The base case holds for formulas a G ON C} n for AX l n . Suppose now if AX n h a, 
then AX^ 1 \~ Val(a). But if AX l n h a then (by induction hypothesis) at all models e^,el,w \= a, and 
so by the definition at all models e\,e 3 b ,w \= Val(a) or \= Val(a). 

Completeness. For the base case, we know that if for all models e\,e 3 b ,w \= a then AX l n h a. 
Suppose |= Val{a), then by definition, for all models e^, e^, w \= a iff (by hypothesis) AX n h a. So, 
AXf h Val(a). I 
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Theorem^ For all a G OMC+\ AX' n h Sof(a) #a is AX+ 1 -consistent. 

Proof: It is helpful to have the following variant of Lemma l4.17l at hand, and a corollary thereof. 

Lemma 9.1: Suppose <j), ifi G OMC^ 1 are i-objective AX^ -consistent formulas, and \= (pVip. Then 
Li(f) A iVj^ is AX^ -consistent. 

Proof: Suppose not. Then AX\ l h -i(L a <pAN a tp), that is h ^L a 4>\/ ^N a ip. Then, by Lemma 

IO \= -,L a <j> V -iNaip. Let W = {w | io (= 0}. Let e£ = W x E*" 1 be a e fc for Alice. Then clearly, 
e a) {}> w ^ ^L a (fr. It must be then that e k , {}, u> |= ^N a t/j. Then there is some (id', e^ 1 ) such 
that e£,e£ _1 ,u/ |= -i^>. And clearly, for all {w' ',e k ~ 1 ) G" e k , e k a ,e\~ x ,w' \= -i0 (by construction). It 
follows that there is a (w' , e^™ 1 } where e„, 
e^ _1 , w' \= ->((/> V ^), contradicting the validity of (f) V ip. I 

Corollary 9.2: Suppose a, Pi, . . . Pk,l, Si, ■ ■ ■ 6 m G ONC^ > are i-objective AX^ 1 -consistent for- 
mulas, and \= a V 7. 77je« Lja A -iLi—ifli ... A -i-Lj-i/^ A iVj7 A -liV^i ... A -iiVj-i<5 m is AX^- 
consistent. 

Returning to Theorem 16.21 Proof on the length of the derivative, using induction on t. Let a be a 
consistent propositional formula. Then, by V2, AX^ h 5af(a). Since it is a consistent propositional 
formula, it is also ^4X^*-consistent. Assume theorem holds for a G OMC^ 1 . Suppose we have 
&f(a A Pk),Sat(j A <5 m ), -.Saf(-.(a V 7)) G OJ\f£+ t ^ 1 then by V3, AX^ h Sat(L ia A ^L^p k A 
ATj7 A -iJVj-i(5 m ). By hypothesis a A 7 A <5 m are AX+'-consistent. And ->(a V 7) is not AX^- 
consistent, and so AX^f h a V 7. By Lemma loTTl |= a V 7. Clearly, by Corollary |9.2[ Lja A -<Li-i/3k A 
ATj7 A — iJVi— >5 m is AX+*-consistent. Finally, suppose that you have Sat(a) for some i-objective a and 
Sat(j3) for some i-subjective /?, then by V4, AX^ h Saf(a A f3). By induction hypothesis, a and /3 are 
j4X+*-consistent. By Lemma loTTl a is satisfiable and (3 is satisfiable, and so is a A /3. By Lemma loTTl 
a A /3 is AX^ 1 -consistent. The other direction is symmetric. | 

Theorem|631 AX' n h a iff AX f V a, for a G ON lif . 

Proof: Since axioms Al n — A4 n , MP, NEC, NECy^ are common to both, their use is not 
discussed. To show that AX' n h a =>• AX^ 1 h a, suppose you had Sat(^a) for some i-objective 
a G ONC+ then using A5' , one could show that A^a D ^Lia. From Theorem 16.21 we also 
know -iQ is AX^ 1 1 -consistent. Then, we can show iVja D -lijO! as well using A5 t n . V2, V3, V4 
follow immediately from Theorem 16.21 Assuming now that the proof holds for base cases, using VI, 
if AX' n h Val(a) and AX' n h Va/(a D /3) then AX' n h VfcZ(/3). Now, by induction hypothesis, 
AX^ 1 \~ Val(a) iff by Lemma loTTl |= Vfo/(a), and so (= a. Similarly, \= a D (3, and thus, |= /3 and 
|= V&Z(/3) by the semantics. By Lemmaij] AX+* h Val((3). 

To show that AX^ f h a =>■ h a, suppose -ia G ONC^ 1 1 is i-objective and AX l ~ l - 

consistent, then one can prove iV^a D ^Lia. Now, ->a is also AX^*-consistent and by Theorem 16.21 
AX' n h Sat(-ia). Then we can prove A^a D -<Lia, as desired. | 
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